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BIOS Update 
Application 
requests signature 
verification of new 
BIOS image from 
TPM. 
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BIOS Update 
Application queries 
TPM for status 
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BIOS Update 
Application 
Updates BIOS and 
locks Flash when 
done 
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FIG. 2 



TPM receives 
verification request 
from BIOS update 
Application and 
performs signature 
verification 
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TPM unlocks flash 
using GPO 
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TPM Post 
completion status to 
BIOS update 
Application 
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